Published: 09/01/2024 Updated: 12/01/2024

CVSS v3 Base Score: 4.4 | Impact Score: 3.6 | Exploitability Score: 0.8

VMScore: 0

Subscribe to Windows Server 2019

Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows server 2019
microsoft windows server 2022
microsoft windows server 2022 23h2
microsoft windows 11 23h2
microsoft windows 10 1809
microsoft windows 11 21h2
microsoft windows 10 21h2
microsoft windows 11 22h2
microsoft windows 10 22h2

Report and exploit of CVE-2024-21305.

CVE-2024-21305 This repo contains the report and PoC of CVE-2024-21305, the non-secure Hypervisor-Protected Code Integrity (HVCI) configuration vulnerability This vulnerability allowed arbitrary kernel-mode code execution, effectively bypassing HVCI, within the root partition For the root cause, read the blog post coauthored with Andrea Allievi (@aall86), a Windows Core OS en

NVD-CWE-noinfo https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21305 https://nvd.nist.gov https://github.com/tandasat/CVE-2024-21305

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-21305

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect